JLSEC-2026-57

🗓️ 06 Apr 2026 13:14:28Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Libksba before 1.6.3 has an overflow vulnerability in Certificate Revocation List signature parser.

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: A vulnerability in libksba package affects Data Replication on Cloud Pak for Data	7 Nov 202320:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue Manager container images are vulnerable to vulnerabilities from libksba and sqlite (CVE-2022-47629 and CVE-2022-35737)	17 Feb 202311:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Libksba abitrary code execution vulnerability( CVE-2022-47629)	5 Jul 202322:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202502:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities	17 Apr 202313:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Libksba ( CVE-2022-47629 )	3 May 202314:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	30 Mar 202316:55	–	ibm
GithubExploit	Exploit for CVE-2017-17562	5 Feb 201605:24	–	githubexploit

Source	Link
dev	www.dev.gnupg.org/T6284
git	www.git.gnupg.org/cgi-bin/gitweb.cgi
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00035.html
security	www.security.gentoo.org/glsa/202212-07
security	www.security.netapp.com/advisory/ntap-20230316-0011/
debian	www.debian.org/security/2022/dsa-5305
dev	www.dev.gnupg.org/T6284
git	www.git.gnupg.org/cgi-bin/gitweb.cgi
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00035.html
security	www.security.gentoo.org/glsa/202212-07

06 Apr 2026 13:30Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.0146

SSVC

libksba before 1.6.3 overflow vulnerability certificate revocation list signature parser